Traffic Trace Info


DumpFile: 201107191400.dump
FileSize: 3407.30MB
Id: 201107191400
StartTime: Tue Jul 19 14:00:01 2011
EndTime: Tue Jul 19 14:15:00 2011
TotalTime: 899.20 seconds
TotalCapSize: -1415.32MB CapLen: 96 bytes
# of packets: 47619244 (30870.40MB)
AvgRate: 287.87Mbps stddev:41.75M

IP flow (unique src/dst pair) Information

# of flows: 1121296 (avg. 42.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.1% 2.2% 2.0% 1.8% 1.6% 1.4% 1.2% 1.2% 1.0%

IP address Information

# of IPv4 addresses: 514033
Top 10 bandwidth usage (bytes/total in %):
12.5% 11.0% 9.5% 6.4% 6.3% 4.2% 3.2% 2.9% 2.3% 2.2%
# of IPv6 addresses: 4177
Top 10 bandwidth usage (bytes/total in %):
77.5% 65.0% 8.3% 2.7% 2.2% 2.1% 1.7% 1.6% 1.6% 1.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   13010082
 [   64-  127]:   10968660
 [  128-  255]:    1331063
 [  256-  511]:     890795
 [  512- 1023]:    1605608
 [ 1024- 2047]:   19813036


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         47619244 (100.00%)      32369959294 (100.00%)    679.77
 ip            47396032 ( 99.53%)      32205023930 ( 99.49%)    679.49
  tcp          41232153 ( 86.59%)      28882725528 ( 89.23%)    700.49
   http(s)     16195856 ( 34.01%)      20613982225 ( 63.68%)   1272.79
   http(c)     10649518 ( 22.36%)       2925316032 (  9.04%)    274.69
   squid         157885 (  0.33%)        100935273 (  0.31%)    639.30
   smtp          244470 (  0.51%)        174209483 (  0.54%)    712.60
   ftp            39790 (  0.08%)          4313926 (  0.01%)    108.42
   pop3           49677 (  0.10%)         10506868 (  0.03%)    211.50
   imap           37002 (  0.08%)         31486548 (  0.10%)    850.94
   telnet           533 (  0.00%)            70083 (  0.00%)    131.49
   ssh           196750 (  0.41%)         16536550 (  0.05%)     84.05
   dns            28312 (  0.06%)          2535644 (  0.01%)     89.56
   bgp              589 (  0.00%)           129025 (  0.00%)    219.06
   napster         1808 (  0.00%)           119310 (  0.00%)     65.99
   realaud          914 (  0.00%)            58698 (  0.00%)     64.22
   rtsp            9034 (  0.02%)         10488654 (  0.03%)   1161.02
   icecast         3873 (  0.01%)           528829 (  0.00%)    136.54
   hotline           57 (  0.00%)             3518 (  0.00%)     61.72
   other       13616085 ( 28.59%)       4991504862 ( 15.42%)    366.59
  udp           4306947 (  9.04%)       2013162372 (  6.22%)    467.42
   dns           751588 (  1.58%)        173359982 (  0.54%)    230.66
   rip                4 (  0.00%)              360 (  0.00%)     90.00
   realaud           18 (  0.00%)             2283 (  0.00%)    126.83
   halflif           95 (  0.00%)             7037 (  0.00%)     74.07
   starcra           50 (  0.00%)             7315 (  0.00%)    146.30
   everque          651 (  0.00%)           250519 (  0.00%)    384.82
   unreal            49 (  0.00%)             6992 (  0.00%)    142.69
   quake           1707 (  0.00%)           142270 (  0.00%)     83.35
   cuseeme            7 (  0.00%)              630 (  0.00%)     90.00
   other        3552672 (  7.46%)       1839299637 (  5.68%)    517.72
  icmp           448938 (  0.94%)         79295478 (  0.24%)    176.63
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            9184 (  0.02%)          2106992 (  0.01%)    229.42
  ip6           1380369 (  2.90%)       1222096634 (  3.78%)    885.34
  other           18256 (  0.04%)          5617656 (  0.02%)    307.72
  frag              551 (  0.00%)           611155 (  0.00%)   1109.17
 ip6             223212 (  0.47%)        164935364 (  0.51%)    738.92
  tcp6           159837 (  0.34%)        147209269 (  0.45%)    921.00
   http(s)        16632 (  0.03%)         15794196 (  0.05%)    949.63
   http(c)        40695 (  0.09%)          3675709 (  0.01%)     90.32
   squid            180 (  0.00%)           101985 (  0.00%)    566.58
   smtp             235 (  0.00%)            95053 (  0.00%)    404.48
   ftp               17 (  0.00%)             1605 (  0.00%)     94.41
   dns              396 (  0.00%)           110041 (  0.00%)    277.88
   bgp               97 (  0.00%)            15736 (  0.00%)    162.23
   other         101585 (  0.21%)        127414944 (  0.39%)   1254.27
  udp6            44875 (  0.09%)         14203811 (  0.04%)    316.52
   dns            41969 (  0.09%)         13805165 (  0.04%)    328.94
   starcra            1 (  0.00%)              113 (  0.00%)    113.00
   quake              1 (  0.00%)              117 (  0.00%)    117.00
   other           2904 (  0.01%)           398416 (  0.00%)    137.20
  icmp6           17749 (  0.04%)          2957814 (  0.01%)    166.65
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            721 (  0.00%)           560390 (  0.00%)    777.24


tcpdump file: 201107191400.dump.gz (1160.00 MB)